CVE-2026-63350
Received Received - Intake

Improper Restriction of Executable Content in Trace Files

Publication date: 2026-10-13

Last updated on: 2026-10-13

Assigner: siemens-SADP

Description
Affected devices do not properly restrict executable content contained in imported trace files. This could allow an attacker to social engineer an authorized user who holds the function right “Read diagnostics” into importing a specially crafted trace file. Successful exploitation could allow attacker-controlled JavaScript to execute in the user’s browser session and perform PLC operations through the web server within the scope of the user’s authorization.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-10-13
Last Modified
2026-10-13
Generated
2026-10-13
AI Q&A
2026-10-13
EPSS Evaluated
N/A
NVD
CVE-2026-63350
EUVD
EUVD-2026-98381

Affected Vendors & Products

Showing 103 associated CPEs
Vendor Product Version / Range
Siemens SIMATIC Drive Controller CPU 1504D TF 0
Siemens SIMATIC Drive Controller CPU 1507D TF 0
Siemens SIMATIC ET 200SP CPU 1510SP F-1 PN 0
Siemens SIMATIC ET 200SP CPU 1510SP-1 PN 0
Siemens SIMATIC ET 200SP CPU 1512SP F-1 PN 0
Siemens SIMATIC ET 200SP CPU 1512SP-1 PN 0
Siemens SIMATIC ET 200SP CPU 1514SP F-2 PN 0
Siemens SIMATIC ET 200SP CPU 1514SP-2 PN 0
Siemens SIMATIC ET 200SP CPU 1514SPT F-2 PN 0
Siemens SIMATIC ET 200SP CPU 1514SPT-2 PN 0
Siemens SIMATIC ET 200SP Open Controller CPU 1515SP PC (incl. SIPLUS variants) 0
Siemens SIMATIC ET 200SP Open Controller CPU 1515SP PC2 (incl. SIPLUS variants) V2 CPUs - Windows OS 0
Siemens SIMATIC ET 200SP Open Controller CPU 1515SP PC2 (incl. SIPLUS variants) V3 CPUs - Industrial OS 0
Siemens SIMATIC ET 200SP Open Controller CPU 1515SP PC2 (incl. SIPLUS variants) V3 CPUs - Windows OS 0
Siemens SIMATIC ET 200SP Open Controller CPU 1515SP PC3 V4 CPUs 0
Siemens SIMATIC S7-1500 CPU 1511-1 PN 0
Siemens SIMATIC S7-1500 CPU 1511C-1 PN 0
Siemens SIMATIC S7-1500 CPU 1511F-1 PN 0
Siemens SIMATIC S7-1500 CPU 1511T-1 PN 0
Siemens SIMATIC S7-1500 CPU 1511TF-1 PN 0
Siemens SIMATIC S7-1500 CPU 1512C-1 PN 0
Siemens SIMATIC S7-1500 CPU 1513-1 PN 0
Siemens SIMATIC S7-1500 CPU 1513F-1 PN 0
Siemens SIMATIC S7-1500 CPU 1513pro F-2 PN 0
Siemens SIMATIC S7-1500 CPU 1513pro-2 PN 0
Siemens SIMATIC S7-1500 CPU 1515-2 PN 0
Siemens SIMATIC S7-1500 CPU 1515F-2 PN 0
Siemens SIMATIC S7-1500 CPU 1515T-2 PN 0
Siemens SIMATIC S7-1500 CPU 1515TF-2 PN 0
Siemens SIMATIC S7-1500 CPU 1516-3 PN/DP 0
Siemens SIMATIC S7-1500 CPU 1516F-3 PN/DP 0
Siemens SIMATIC S7-1500 CPU 1516pro F-2 PN 0
Siemens SIMATIC S7-1500 CPU 1516pro-2 PN 0
Siemens SIMATIC S7-1500 CPU 1516T-3 PN 0
Siemens SIMATIC S7-1500 CPU 1516T-3 PN/DP 0
Siemens SIMATIC S7-1500 CPU 1516TF-3 PN 0
Siemens SIMATIC S7-1500 CPU 1516TF-3 PN/DP 0
Siemens SIMATIC S7-1500 CPU 1517-3 PN 0
Siemens SIMATIC S7-1500 CPU 1517-3 PN/DP 0
Siemens SIMATIC S7-1500 CPU 1517F-3 PN 0
Siemens SIMATIC S7-1500 CPU 1517F-3 PN/DP 0
Siemens SIMATIC S7-1500 CPU 1517T-3 PN 0
Siemens SIMATIC S7-1500 CPU 1517T-3 PN/DP 0
Siemens SIMATIC S7-1500 CPU 1517TF-3 PN 0
Siemens SIMATIC S7-1500 CPU 1517TF-3 PN/DP 0
Siemens SIMATIC S7-1500 CPU 1518-3 PN 0
Siemens SIMATIC S7-1500 CPU 1518-4 PN/DP 0
Siemens SIMATIC S7-1500 CPU 1518-4 PN/DP MFP 0
Siemens SIMATIC S7-1500 CPU 1518F-3 PN 0
Siemens SIMATIC S7-1500 CPU 1518F-4 PN/DP 0
Siemens SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP 0
Siemens SIMATIC S7-1500 CPU 1518T-3 PN 0
Siemens SIMATIC S7-1500 CPU 1518T-4 PN/DP 0
Siemens SIMATIC S7-1500 CPU 1518TF-3 PN 0
Siemens SIMATIC S7-1500 CPU 1518TF-4 PN/DP 0
Siemens SIMATIC S7-1500 CPU S7-1518-4 PN/DP ODK 0
Siemens SIMATIC S7-1500 CPU S7-1518F-4 PN/DP ODK 0
Siemens SIMATIC S7-1500 ET 200pro: CPU 1513PRO F-2 PN 0
Siemens SIMATIC S7-1500 ET 200pro: CPU 1513PRO-2 PN 0
Siemens SIMATIC S7-1500 ET 200pro: CPU 1516PRO F-2 PN 0
Siemens SIMATIC S7-1500 ET 200pro: CPU 1516PRO-2 PN 0
Siemens SIMATIC S7-1500 Software Controller CPU 1507S F V2 0
Siemens SIMATIC S7-1500 Software Controller CPU 1507S F V3 0
Siemens SIMATIC S7-1500 Software Controller CPU 1507S F V4 0
Siemens SIMATIC S7-1500 Software Controller CPU 1507S V2 0
Siemens SIMATIC S7-1500 Software Controller CPU 1507S V3 0
Siemens SIMATIC S7-1500 Software Controller CPU 1507S V4 0
Siemens SIMATIC S7-1500 Software Controller CPU 1508S F V2 0
Siemens SIMATIC S7-1500 Software Controller CPU 1508S F V3 0
Siemens SIMATIC S7-1500 Software Controller CPU 1508S F V4 0
Siemens SIMATIC S7-1500 Software Controller CPU 1508S T V3 0
Siemens SIMATIC S7-1500 Software Controller CPU 1508S TF V3 0
Siemens SIMATIC S7-1500 Software Controller CPU 1508S V2 0
Siemens SIMATIC S7-1500 Software Controller CPU 1508S V3 0
Siemens SIMATIC S7-1500 Software Controller CPU 1508S V4 0
Siemens SIMATIC S7-1500 Software Controller Linux V2 0
Siemens SIMATIC S7-1500 Software Controller Linux V3 0
Siemens SIMATIC S7-PLCSIM Advanced 0
Siemens SIPLUS ET 200SP CPU 1510SP F-1 PN 0
Siemens SIPLUS ET 200SP CPU 1510SP F-1 PN RAIL 0
Siemens SIPLUS ET 200SP CPU 1510SP-1 PN 0
Siemens SIPLUS ET 200SP CPU 1510SP-1 PN RAIL 0
Siemens SIPLUS ET 200SP CPU 1512SP F-1 PN 0
Siemens SIPLUS ET 200SP CPU 1512SP F-1 PN RAIL 0
Siemens SIPLUS ET 200SP CPU 1512SP-1 PN 0
Siemens SIPLUS ET 200SP CPU 1512SP-1 PN RAIL 0
Siemens SIPLUS S7-1500 CPU 1511-1 PN 0
Siemens SIPLUS S7-1500 CPU 1511-1 PN T1 RAIL 0
Siemens SIPLUS S7-1500 CPU 1511-1 PN TX RAIL 0
Siemens SIPLUS S7-1500 CPU 1511F-1 PN 0
Siemens SIPLUS S7-1500 CPU 1513-1 PN 0
Siemens SIPLUS S7-1500 CPU 1513F-1 PN 0
Siemens SIPLUS S7-1500 CPU 1515F-2 PN 0
Siemens SIPLUS S7-1500 CPU 1515F-2 PN RAIL 0
Siemens SIPLUS S7-1500 CPU 1515F-2 PN T2 RAIL 0
Siemens SIPLUS S7-1500 CPU 1516-3 PN/DP 0
Siemens SIPLUS S7-1500 CPU 1516-3 PN/DP RAIL 0
Siemens SIPLUS S7-1500 CPU 1516-3 PN/DP TX RAIL 0
Siemens SIPLUS S7-1500 CPU 1516F-3 PN/DP 0
Siemens SIPLUS S7-1500 CPU 1516F-3 PN/DP RAIL 0
Siemens SIPLUS S7-1500 CPU 1518-4 PN/DP 0
Siemens SIPLUS S7-1500 CPU 1518-4 PN/DP MFP 0
Siemens SIPLUS S7-1500 CPU 1518F-4 PN/DP 0

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-95 The product receives input from an upstream component, but it does not neutralize or incorrectly neutralizes code syntax before using the input in a dynamic evaluation call (e.g. "eval").

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability involves affected Siemens devices not properly restricting executable content in imported trace files. An attacker could trick an authorized user with 'Read diagnostics' rights into importing a malicious trace file. This could lead to attacker-controlled JavaScript executing in the user's browser session and performing PLC operations through the web server within the user's authorization scope.

Detection Guidance

This vulnerability involves improper handling of executable content in trace files. Detection requires monitoring for suspicious trace file imports or unauthorized JavaScript execution in browser sessions. Check Siemens device logs for unusual trace file operations or browser-based PLC control attempts.

Impact Analysis

The impact includes potential unauthorized execution of JavaScript in the user's browser session, allowing attackers to perform PLC operations within the user's authorized permissions. This could lead to unauthorized changes in industrial control systems, data breaches, or disruption of operations.

Compliance Impact

This vulnerability could allow unauthorized JavaScript execution in a user's browser session, potentially leading to unauthorized PLC operations. This may violate compliance requirements for data integrity, access control, and audit logging in standards like GDPR and HIPAA by enabling unauthorized data access or modification.

Mitigation Strategies

Immediately restrict the 'Read diagnostics' function right to authorized personnel only. Disable or remove unused trace file import features. Monitor network traffic for unauthorized PLC operations via web interfaces. Apply Siemens security updates if available.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-63350. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart